GitHub 红队武器库🚨 - 📦 GitHub 全球红队渗透资源中转站。旨在收录那些“好用却难找”的安全项目。🔗 定时推送：GitHub Trending (Security)🛠 必备清单：后渗透、远控、免杀、提权工具集📅 更新频率：每日精选，绝不灌水。⚠️ 本频道仅供安全研究与授权测试使用。

📦 GitHub 全球红队渗透资源中转站。
旨在收录那些“好用却难找”的安全项目。
🔗 定时推送：GitHub Trending (Security)
🛠 必备清单：后渗透、远控、免杀、提权工具集
📅 更新频率：每日精选，绝不灌水。
⚠️ 本频道仅供安全研究与授权测试使用。

05:16 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.
URL：https://github.com/amalpvatayam67/day06-foxcms-rce

标签：#CVE-2025

GitHub - amalpvatayam67/day06-foxcms-rce: This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()`…

GitHub - amalpvatayam67/day06-foxcms-rce: This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()`…

This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution. - amalpvatayam67/day06-foxcms-rce

04:54 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.
URL：https://github.com/amalpvatayam67/day06-foxcms-rce

标签：#CVE-2025

GitHub - amalpvatayam67/day06-foxcms-rce: This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()`…

GitHub - amalpvatayam67/day06-foxcms-rce: This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()`…

This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution. - amalpvatayam67/day06-foxcms-rce

03:54 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：RCE
描述：MotionEye RCE via Client-Side Validation Bypass through config parameter
URL：https://github.com/aprabhatverma/RCE-in-motioneye-0.43.1b4

标签：#RCE

03:51 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.
URL：https://github.com/mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

标签：#CVE-2025

GitHub - mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover: A hands-on forensic walkthrough of CVE-2025-59359…

GitHub - mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover: A hands-on forensic walkthrough of CVE-2025-59359…

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analy...

03:34 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：攻防
描述：anliu 是一个专注于安全领域的信息流网站，旨在聚合与分发高质量的安全资讯、漏洞通告、攻防研究、工具动态等内容
URL：https://github.com/Sec-labels/Anliu

标签：#攻防

GitHub - Sec-labels/Anliu: anliu 是一个专注于安全领域的信息流网站，旨在聚合与分发高质量的安全资讯、漏洞通告、攻防研究、工具动态等内容

anliu 是一个专注于安全领域的信息流网站，旨在聚合与分发高质量的安全资讯、漏洞通告、攻防研究、工具动态等内容 - Sec-labels/Anliu

03:20 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：攻防
描述：anliu 是一个专注于安全领域的信息流网站，旨在聚合与分发高质量的安全资讯、漏洞通告、攻防研究、工具动态等内容
URL：https://github.com/bios000/Anliu

标签：#攻防

03:07 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：CVE-2025
描述：🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.
URL：https://github.com/mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

标签：#CVE-2025

GitHub - mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover: A hands-on forensic walkthrough of CVE-2025-59359…

GitHub - mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover: A hands-on forensic walkthrough of CVE-2025-59359…

A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analy...

02:02 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：代码审计
描述：一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成
URL：https://github.com/ccscscs1212/security-tools

标签：#代码审计

GitHub - ccscscs1212/security-tools: 一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成

GitHub - ccscscs1212/security-tools: 一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成

一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成. Contribute to ccscscs1212/security-tools development by creating an account on GitHub.

01:50 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：代码审计
描述：一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成
URL：https://github.com/ccscscs1212/security-tools

标签：#代码审计

GitHub - ccscscs1212/security-tools: 一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成

GitHub - ccscscs1212/security-tools: 一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成

一套 Python 自动化安全工具脚本，用于端口检测、日志分析、代码审计、密码策略评估与报告生成. Contribute to ccscscs1212/security-tools development by creating an account on GitHub.

01:32 · Sep 18, 2025 · Thu

GitHub监控消息提醒！！！

更新了：Red Team
描述：AD + Splunk + Sysmon lab with brute force & Atomic Red Team attack simulations.
URL：https://github.com/shaurya96/AD-1.0

标签：#Red Team

GitHub - shaurya96/AD-1.0: AD + Splunk + Sysmon lab with brute force & Atomic Red Team attack simulations.

GitHub - shaurya96/AD-1.0: AD + Splunk + Sysmon lab with brute force & Atomic Red Team attack simulations.

AD + Splunk + Sysmon lab with brute force & Atomic Red Team attack simulations. - shaurya96/AD-1.0

21:53 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：信息收集
描述：Scout 是一个基于 Roo Code VS Code 扩展设计的实验性 Agent 实现。它专注于通过模拟人类行为进行精准的网络信息收集、研究与交互，旨在将 Roo Code 转变为一个强大的 Web 研究助手。
URL：https://github.com/yuanweize/FormVault

标签：#信息收集

GitHub - yuanweize/FormVault: FormVault - Securely collects client personal information and document uploads (e.g., student ID…

GitHub - yuanweize/FormVault: FormVault - Securely collects client personal information and document uploads (e.g., student ID…

FormVault - Securely collects client personal information and document uploads (e.g., student ID, passport photos) with a clean frontend form and simple admin backend for managing submissions and e...

21:42 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：信息收集
描述：Scout 是一个基于 Roo Code VS Code 扩展设计的实验性 Agent 实现。它专注于通过模拟人类行为进行精准的网络信息收集、研究与交互，旨在将 Roo Code 转变为一个强大的 Web 研究助手。
URL：https://github.com/yuanweize/FormVault

标签：#信息收集

GitHub - yuanweize/FormVault: FormVault - Securely collects client personal information and document uploads (e.g., student ID…

GitHub - yuanweize/FormVault: FormVault - Securely collects client personal information and document uploads (e.g., student ID…

FormVault - Securely collects client personal information and document uploads (e.g., student ID, passport photos) with a clean frontend form and simple admin backend for managing submissions and e...

20:44 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：Red Team
描述：Provides guides and examples for AI Red Team Testing
URL：https://github.com/scherrie13/AI_Testing

标签：#Red Team

scherrie13/AI_Testing

scherrie13/AI_Testing

Provides guides and examples for AI Red Team Testing - scherrie13/AI_Testing

14:32 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：漏洞检测
描述：一个用以协作开发越权漏洞自动化检测工具的仓库
URL：https://github.com/Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities

标签：#漏洞检测

GitHub - Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities: 一个用以协作开发越权漏洞自动化检测工具的仓库

GitHub - Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities: 一个用以协作开发越权漏洞自动化检测工具的仓库

一个用以协作开发越权漏洞自动化检测工具的仓库. Contribute to Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities development by creating an account on GitHub.

14:32 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Hackery & Web p0wn
URL：https://github.com/rolling-code/PowerShell-Scripts

标签：#Red Team

GitHub - rolling-code/PowerShell-Scripts: Red Team Hackery & Web p0wn

GitHub - rolling-code/PowerShell-Scripts: Red Team Hackery & Web p0wn

Red Team Hackery & Web p0wn. Contribute to rolling-code/PowerShell-Scripts development by creating an account on GitHub.

14:32 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：漏洞利用
描述：Hex@Strike v6.0具有具有自主AI代理、智能决策和漏洞智能的多代理架构。 Hex@Strike 是一款先进的 MCP 服务器,可让 AI 代理(Claude、GPT、Copilot 等)自动运行 150 多个网络安全工具,用于自动笔试、漏洞发现、漏洞利用自动化和安全研究。无缝连接具有现实世界攻击性安全能力的LLM。 www。hexstrike。com
URL：https://github.com/goodtab/cpHexstrike

标签：#漏洞利用

GitHub - goodtab/cpHexstrike: Hex@Strike v6.0具有具有自主AI代理、智能决策和漏洞智能的多代理架构。 Hex@Strike 是一款先进的 MCP 服务器,可让 AI 代理(Claude、GPT、Copilot…

Hex@Strike v6.0具有具有自主AI代理、智能决策和漏洞智能的多代理架构。 Hex@Strike 是一款先进的 MCP 服务器,可让 AI 代理(Claude、GPT、Copilot 等)自动运行 150 多个网络安全工具,用于自动笔试、漏洞发现、漏洞利用自动化和安全研究。无缝连接具有现实世界攻击性安全能力的LLM。 www。hexstrike。com - goodtab/cpH...

14:32 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：反序列化
描述：C++数据序列化与反序列化
URL：https://github.com/xvorin/serdes

标签：#反序列化

GitHub - xvorin/serdes: C++数据序列化与反序列化

GitHub - xvorin/serdes: C++数据序列化与反序列化

C++数据序列化与反序列化. Contribute to xvorin/serdes development by creating an account on GitHub.

12:10 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：webshell
描述：Bypass webshell 2025 + anti delete with crontab + bypass all waff n firewall
URL：https://github.com/RizkyEvory/Bypass-Webshell

标签：#webshell

GitHub - RizkyEvory/Bypass-Webshell: Bypass webshell 2025 + anti delete with crontab + bypass all waff n firewall

GitHub - RizkyEvory/Bypass-Webshell: Bypass webshell 2025 + anti delete with crontab + bypass all waff n firewall

Bypass webshell 2025 + anti delete with crontab + bypass all waff n firewall - RizkyEvory/Bypass-Webshell

11:28 · Sep 17, 2025 · Wed

GitHub监控消息提醒！！！

更新了：漏洞检测
描述：一个用以协作开发越权漏洞自动化检测工具的仓库
URL：https://github.com/Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities

标签：#漏洞检测

GitHub - Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities: 一个用以协作开发越权漏洞自动化检测工具的仓库

GitHub - Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities: 一个用以协作开发越权漏洞自动化检测工具的仓库

一个用以协作开发越权漏洞自动化检测工具的仓库. Contribute to Hash012/Automated_detection_tool_for_privilege_escalation_vulnerabilities development by creating an account on GitHub.

Powered by BroadcastChannel & Sepia